Research Article
What Data Do the Google Dialer and Messages Apps on Android Send to Google?
@INPROCEEDINGS{10.1007/978-3-031-25538-0_29, author={Douglas J. Leith}, title={What Data Do the Google Dialer and Messages Apps on Android Send to Google?}, proceedings={Security and Privacy in Communication Networks. 18th EAI International Conference, SecureComm 2022, Virtual Event, October 2022, Proceedings}, proceedings_a={SECURECOMM}, year={2023}, month={2}, keywords={}, doi={10.1007/978-3-031-25538-0_29} }- Douglas J. Leith
Year: 2023
What Data Do the Google Dialer and Messages Apps on Android Send to Google?
SECURECOMM
Springer
DOI: 10.1007/978-3-031-25538-0_29
Abstract
We report on measurements of the data sent to Google by the Google Messages and Google Dialer apps on an Android handset. We find that these apps tell Google when message/phone calls are made/received. The data sent by Google Messages includes a hash of the message text, allowing linking of sender and receiver in a message exchange. The data sent by Google Dialer includes the call time and duration, again allowing linking of the two handsets engaged in a phone call. Phone numbers are also sent to Google. In addition, the timing and duration of other user interactions with the apps are sent to Google. There is no opt out from this data collection. The data is sent via two channels, (i) the Google Play Services Clearcut logger and (ii) Google/Firebase Analytics. This study is therefore one of the first to cast light on the actual telemetry data sent by Google Play Services, which to date has largely been opaque. We informed Google of our findings and delayed publication for several months to engage with them. On foot of this work Google say that they plan to make multiple changes to their Messages and Dialer apps.
